last executing test programs: 19.035187352s ago: executing program 4 (id=341): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) 18.885708724s ago: executing program 4 (id=342): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16.300529674s ago: executing program 1 (id=350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x68) 14.893180532s ago: executing program 1 (id=353): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xcfc4, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_mcast\x00') lseek(r4, 0x10001, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'wlan0\x00', @random="9d193f791483"}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008"], 0xfb5) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180", @ANYBLOB="e7d6b4f91e63d012d0149e", @ANYRES32=r3, @ANYRESOCT=r0], 0x18}}, 0x0) 14.570921628s ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sched_getaffinity(r0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$sock_ifreq(r3, 0x8916, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x4}) r4 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x54, 0x0}}], 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r5 = memfd_secret(0x80000) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[@cr0], 0x1) fsopen(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12.90069711s ago: executing program 4 (id=357): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 12.839487071s ago: executing program 1 (id=358): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 12.606241626s ago: executing program 4 (id=359): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8042, 0x80) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = fanotify_init(0x20, 0x101000) fanotify_mark(r4, 0x1, 0x48000013, r2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) 11.090250545s ago: executing program 4 (id=364): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r1, 0x7) 10.85332353s ago: executing program 1 (id=365): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4091, &(0x7f0000001b80)={[{@umask={'umask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0xe}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@sys_tz}, {@time_offset={'time_offset', 0x3d, 0x200}}, {@umask}, {@errors_continue}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x3, 0x1543, &(0x7f00000003c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 10.424801928s ago: executing program 1 (id=367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.78619116s ago: executing program 1 (id=368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.345276409s ago: executing program 32 (id=368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.618944003s ago: executing program 2 (id=373): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 8.366229378s ago: executing program 3 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.560984564s ago: executing program 2 (id=375): read$FUSE(0xffffffffffffffff, &(0x7f00000010c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r4, 0x0, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000200)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}}, 0x4800) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 6.605856882s ago: executing program 3 (id=376): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}], 0x1c) 6.493655844s ago: executing program 2 (id=377): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$watch_queue(0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r3) io_setup(0x19, 0x0) io_submit(0x0, 0x0, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f0000000100)=@random={'btrfs.', '\x00*W}j\xc2\x84\xf8\x96H\xd7\xf9\xd1\xd4/\x96}\xc6S\xf9\xb0\xdc\xe7\x83/\x1cI\xff\x84\xc7K\xd1RV\x17\xbe\x8f)\x90\x97\xa5z\x8a/\xb3\xee\x10r\x90OU\x17\x82T\xe4\xadpc\x04\xf5M\xafC\xee\xe0\x94\xb7\xb1\xb3a\x93\xcb\xe9\xc2\r\xf8\x886\xd6\xf3\xa7[\xb3\"\x1d\xa5\xd4\xe4{\x9a\xa87)\xdf*\xf8\xea\x1b)\xb4\xeaJ\x99u\a\x9f\x89p\x16\x1d\x8b9/\x9c\xff\xec\xee\x85\xf8\x15fbu\xe5~\xa5\xd7\x8b}\xd4\xe3\xf8J&\xfd\x18Y\xd9R\x13H`\x96y\xc9\xb4\xd8#\xe2QHFI%Q\xb2\xdaJB\xb4\xeb'}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) 6.314239587s ago: executing program 3 (id=379): openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4000, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") 4.6223942s ago: executing program 0 (id=380): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="8b913f2c0f5bc12e941d00000000000000004f742e410000b2ffe433c349e53e02f23ec97586f6cd7d0707dcb61abcdb30d7d9d8337f63f40a5f4339337b705d9fb1536ea194681cda33900839fa4602bfb28c76ebdfc1868b63bd93b9cb3dd285f6bb3efaf35130dcd2ec39a63162", 0x6f}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe149", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca", 0x6c}, {&(0x7f0000000240)="ac52", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c40)="162cb93a68dfaa7b0c55bb402296df3f73e0013b1467181eb4d108070927c3bc57d5f8dffb35a12be85d3bdd265f3112448a1a99e78fd77d3322080326b860a48d9c1be2b8592c906f5d08a42b112772221b8f00f674ab50a02613232afca10c07c686840204bda13d7689d216ffa7b4bfb6436a", 0x74}, {&(0x7f0000000d00)="232f53154963840274632b8404fa176d72e5b5d10976aea76859d7c15a71cf3f05dad2f09885ecd163427a336087efea95c09bea938974cc5508f39372c3d435d181855cbee28b93fda4fb5b84281b763cfc03a63d770dcb166058fda9e59b1abb8759bef9a1d54b1dcf85b52eae4654d846f86d6b09d0605a0c54a96803be85f40e739d7377ca5fe395876918e3270e51b43f22ad18ef3eb47d69a4ca6e49", 0x9f}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000000000000000000002000000070000000000000011000000000000000000000001000000870000000000000011000000000000000000000001000000050000000000000028000000000000000000000007000000070b5c00000000ac1e0001890a55619ad038b8a675000000140000000000000000000000020000007f0000000000000014000000000000000000000002000000000000000000000011"], 0xb8}}], 0x3, 0x20008d0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4.377380155s ago: executing program 0 (id=381): socket(0x1d, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000800) syz_open_procfs$userns(0x0, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 3.914115754s ago: executing program 3 (id=382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setns(0xffffffffffffffff, 0x2000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x60, 0x149203) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "0000001b", "ff00"}, 0x28) write$binfmt_aout(r3, 0x0, 0xfdef) write$binfmt_elf64(r3, 0x0, 0x78) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@textreal={0x8, &(0x7f0000000340)="0f01594166b8ecb100000f23d80f21f86635400000d00f23f80f20e06635040000000f22e0f30fc7320f0135660ff17e05f3260f225c0f300f063fc20066b8762f000066ef", 0x45}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 3.845787026s ago: executing program 0 (id=383): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x80) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x7e) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x988, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ftruncate(0xffffffffffffffff, 0x100c17a) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0xfffffffffffffffe) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 3.342473245s ago: executing program 2 (id=384): r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 3.018250772s ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44840) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) recvmsg(0xffffffffffffffff, 0x0, 0x100) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f0000000000000000070000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 1.223447996s ago: executing program 0 (id=386): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 790.283745ms ago: executing program 0 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 361.616093ms ago: executing program 3 (id=388): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0xb, 0x29, 0x2, {0x5}}, 0xb) 232.373445ms ago: executing program 3 (id=389): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002d00)={0x1, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x2) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001880)=""/4096) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 26.08161ms ago: executing program 2 (id=390): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x8f79, 0x0, 0x3}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffa, 0x9c0, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0x8a, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x5f1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffb, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x20000000, 0x8009, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x804, 0x2, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2d, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0xa, 0x5, 0x0, 0x2, 0x40, 0x0, 0x8000000, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x77, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x354, 0x0, 0x3, 0x0, 0xcaa, 0x6, 0x3, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x3]}, 0x45c) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 0 (id=391): rt_sigqueueinfo(0x0, 0x41, &(0x7f0000000380)={0x3f, 0xc6, 0xe}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. syzkaller login: [ 51.464288][ T4253] cgroup: Unknown subsys name 'net' [ 51.605723][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.897577][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.297884][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.307229][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.314899][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.322615][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.330242][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.335799][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.338799][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.345035][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.352083][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.359632][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.366331][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.373642][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.381108][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.394018][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.394858][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.402221][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.408905][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.416437][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.423157][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.429645][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.436791][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.443792][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.450495][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.458303][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.464444][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.471569][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.513855][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.514128][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.533592][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.542145][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.880139][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 54.979646][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 55.064621][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 55.089020][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.096966][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.105617][ T4269] device bridge_slave_0 entered promiscuous mode [ 55.118991][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.126381][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.134154][ T4269] device bridge_slave_1 entered promiscuous mode [ 55.145877][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 55.228400][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.262014][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.271302][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.278401][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.287428][ T4275] device bridge_slave_0 entered promiscuous mode [ 55.302999][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 55.328519][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.335856][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.344440][ T4275] device bridge_slave_1 entered promiscuous mode [ 55.358836][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.365997][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.374269][ T4270] device bridge_slave_0 entered promiscuous mode [ 55.401547][ T4269] team0: Port device team_slave_0 added [ 55.413395][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.420513][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.428769][ T4270] device bridge_slave_1 entered promiscuous mode [ 55.446775][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454051][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.462156][ T4264] device bridge_slave_0 entered promiscuous mode [ 55.471477][ T4269] team0: Port device team_slave_1 added [ 55.477389][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.484833][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.492960][ T4264] device bridge_slave_1 entered promiscuous mode [ 55.502792][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.540114][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.557832][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.592189][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.601996][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.608927][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.634865][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.648358][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.679906][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.687045][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.713580][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.726265][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.737820][ T4275] team0: Port device team_slave_0 added [ 55.768092][ T4275] team0: Port device team_slave_1 added [ 55.781637][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.788766][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.796602][ T4268] device bridge_slave_0 entered promiscuous mode [ 55.806189][ T4270] team0: Port device team_slave_0 added [ 55.840118][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.847479][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.855274][ T4268] device bridge_slave_1 entered promiscuous mode [ 55.863459][ T4270] team0: Port device team_slave_1 added [ 55.884159][ T4264] team0: Port device team_slave_0 added [ 55.893527][ T4269] device hsr_slave_0 entered promiscuous mode [ 55.900337][ T4269] device hsr_slave_1 entered promiscuous mode [ 55.907419][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.914734][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.940857][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.953747][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.960697][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.987389][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.014684][ T4264] team0: Port device team_slave_1 added [ 56.052037][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.081296][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.088263][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.114285][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.127064][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.134282][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.160789][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.174423][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.187806][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.195007][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.221052][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.235102][ T4275] device hsr_slave_0 entered promiscuous mode [ 56.242278][ T4275] device hsr_slave_1 entered promiscuous mode [ 56.248842][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.256751][ T4275] Cannot create hsr debugfs directory [ 56.279664][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.286906][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.313010][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.341919][ T4268] team0: Port device team_slave_0 added [ 56.367992][ T4268] team0: Port device team_slave_1 added [ 56.421184][ T4270] device hsr_slave_0 entered promiscuous mode [ 56.428289][ T4270] device hsr_slave_1 entered promiscuous mode [ 56.434874][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.442955][ T4270] Cannot create hsr debugfs directory [ 56.448879][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.456650][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.482857][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.497585][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.505432][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.531454][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.576140][ T4264] device hsr_slave_0 entered promiscuous mode [ 56.583317][ T4264] device hsr_slave_1 entered promiscuous mode [ 56.589830][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.597479][ T4264] Cannot create hsr debugfs directory [ 56.603532][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 56.603695][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 56.609708][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 56.615851][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 56.630960][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 56.719682][ T4268] device hsr_slave_0 entered promiscuous mode [ 56.727444][ T4268] device hsr_slave_1 entered promiscuous mode [ 56.734243][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.741907][ T4268] Cannot create hsr debugfs directory [ 56.894829][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.922487][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.941915][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.956798][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.034373][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.060993][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.072417][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.104496][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.113757][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.137371][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.164915][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.179400][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.220380][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.237987][ T4268] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.261717][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.273300][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.282226][ T4268] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.299073][ T4268] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.316885][ T4268] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.327628][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.353441][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.364804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.374174][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.383148][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.392370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.424974][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.433997][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.442928][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.449986][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.463042][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.486328][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.521075][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.530643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.540338][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.549462][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.558414][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.569123][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.586423][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.595511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.605858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.618666][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.635194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.643900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.670242][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.682219][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.692785][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.701379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.713017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.721597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.729193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.739568][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.757013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.766473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.776707][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.783866][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.803921][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.831224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.840488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.851591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.859367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.868678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.877816][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.884956][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.893393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.902359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.911441][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.918539][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.933238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.942193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.984703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.996335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.005723][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.012889][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.021713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.030524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.041114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.050366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.060454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.094836][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.111695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.120131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.131697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.140246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.149502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.158129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.167439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.176218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.184847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.193761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.203370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.211782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.220071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.233285][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.257829][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.265795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.274186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.283765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.294365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.302814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.312207][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.341409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.349038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.358965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.371369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.380743][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.387889][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.397274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.406368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.416033][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.423190][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.455393][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.470331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.483060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.502195][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.533166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.551997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.570397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.598847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.622069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.636953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.645867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.660260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.674149][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.684899][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 58.684937][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 58.690993][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 58.696934][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 58.703797][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 58.717730][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.733501][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.742452][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.751048][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.759895][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.777872][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.799099][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.809113][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.836466][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.857725][ T4275] device veth0_vlan entered promiscuous mode [ 58.899597][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.911141][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.918647][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.962648][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.978070][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.997229][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.009811][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.017008][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.025885][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.034447][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.045835][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.067254][ T4275] device veth1_vlan entered promiscuous mode [ 59.083521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.099256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.136298][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.143456][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.181314][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.201834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.209361][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.248293][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.264779][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.275353][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.286043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.330017][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.351328][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.360233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.373860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.383018][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.392431][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.401541][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.409121][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.417053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.426078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.437157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.447212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.468026][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.482825][ T4275] device veth0_macvtap entered promiscuous mode [ 59.504182][ T4275] device veth1_macvtap entered promiscuous mode [ 59.532059][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.543740][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.553111][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.563260][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.573088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.582357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.608445][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.618258][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.660316][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.670597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.684112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.694289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.707637][ T4268] device veth0_vlan entered promiscuous mode [ 59.719025][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.742145][ T4270] device veth0_vlan entered promiscuous mode [ 59.748777][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.758714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.768977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.777588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.786685][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.796047][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.807415][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.816361][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.824697][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.834141][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.846457][ T4269] device veth0_vlan entered promiscuous mode [ 59.855713][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.863911][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.873102][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.892738][ T4268] device veth1_vlan entered promiscuous mode [ 59.911770][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.920639][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.929678][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.939928][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.950783][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.959356][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.968073][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.975771][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.987573][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.013783][ T4269] device veth1_vlan entered promiscuous mode [ 60.022851][ T4270] device veth1_vlan entered promiscuous mode [ 60.034253][ T4268] device veth0_macvtap entered promiscuous mode [ 60.044027][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.053819][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.062893][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.071846][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.080490][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.118564][ T4269] device veth0_macvtap entered promiscuous mode [ 60.137852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.147366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.165337][ T4269] device veth1_macvtap entered promiscuous mode [ 60.184336][ T4268] device veth1_macvtap entered promiscuous mode [ 60.199868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.209465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.224732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.233854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.264669][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.275372][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.289550][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.298561][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.307716][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.316313][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.331808][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.343597][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.354808][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.365107][ T4270] device veth0_macvtap entered promiscuous mode [ 60.390187][ T4264] device veth0_vlan entered promiscuous mode [ 60.410342][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.412570][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.421951][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.435986][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.440110][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.458068][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.469990][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.477816][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.486547][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.495479][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.504523][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.514285][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.523468][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.535221][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.545824][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.557633][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.569254][ T4264] device veth1_vlan entered promiscuous mode [ 60.577708][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.586884][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.595594][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.609715][ T4270] device veth1_macvtap entered promiscuous mode [ 60.618712][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.629093][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.638525][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.647389][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.658372][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.669771][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.680186][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.695272][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.706267][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.747773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.756726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.762626][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 60.769946][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 60.770186][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 60.776171][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 60.776215][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 60.783476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.803007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.814130][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.823587][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.832377][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.841905][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.858694][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.869731][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.879755][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.891233][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.901348][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.912591][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.927140][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.947781][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.961373][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.971665][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.980529][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.989584][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.000011][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.011648][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.022058][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.032710][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.042676][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.053322][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.064255][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.085018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.104385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.144634][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.157102][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.167487][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.177110][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.215969][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.230763][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.262531][ T4264] device veth0_macvtap entered promiscuous mode [ 61.289930][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.315237][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.347187][ T4264] device veth1_macvtap entered promiscuous mode [ 61.366859][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.377445][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.386644][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.400630][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.409774][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.434616][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.451744][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.462566][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.473710][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.484395][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.495380][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.505706][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.516703][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.528979][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.546187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.554841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.570129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.588147][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.607491][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.619776][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.632325][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.642964][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.658523][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.668879][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.683401][ T4379] loop1: detected capacity change from 0 to 32768 [ 61.684412][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.703320][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.709262][ T4379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4379) [ 61.720765][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.732828][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.739541][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.742403][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.753077][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.771550][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.792349][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.805748][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.821725][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.838803][ T4379] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.862645][ T4379] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 61.865252][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.887460][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.917906][ T4379] BTRFS info (device loop1): using free space tree [ 61.938093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.995069][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.006929][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.029282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.140797][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.149164][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.276314][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.305725][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.330989][ T4379] BTRFS info (device loop1): enabling ssd optimizations [ 62.355062][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.383800][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.398184][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.411162][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.462790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.582097][ T4403] loop4: detected capacity change from 0 to 512 [ 62.617324][ T26] audit: type=1800 audit(1757958812.528:2): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 62.681408][ T26] audit: type=1800 audit(1757958812.588:3): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 62.711735][ T4403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.6: error while reading EA inode 32 err=-116 [ 62.732982][ T4403] EXT4-fs (loop4): Remounting filesystem read-only [ 62.739665][ T4403] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.831827][ T4403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.6: error while reading EA inode 32 err=-116 [ 62.841138][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 62.841176][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 62.841199][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 62.841219][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 62.852827][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 62.873247][ T4403] EXT4-fs (loop4): Remounting filesystem read-only [ 62.875859][ T4403] EXT4-fs (loop4): 1 orphan inode deleted [ 62.875903][ T4403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.916079][ T4403] EXT4-fs (loop4): unmounting filesystem. [ 62.963629][ T26] audit: type=1800 audit(1757958812.878:4): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 62.991271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.991753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.049489][ T4415] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 63.883167][ T4275] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.968462][ T4420] loop4: detected capacity change from 0 to 32768 [ 64.285955][ T4443] loop3: detected capacity change from 0 to 128 [ 64.301137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.356652][ T4443] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4561: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 64.439494][ T4443] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 64.547645][ T4443] loop3: detected capacity change from 0 to 16 [ 64.560374][ T4443] erofs: (device loop3): mounted with root inode @ nid 36. [ 64.681338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.690893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 64.699180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 64.708288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 64.742945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 64.751317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 64.768357][ T4448] futex_wake_op: syz.4.12 tries to shift op by -1; fix this program [ 64.922241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.161248][ T4469] loop1: detected capacity change from 0 to 1024 [ 66.218296][ T4469] hfsplus: failed to load root directory [ 66.717838][ T4476] loop1: detected capacity change from 0 to 4096 [ 67.179214][ T4275] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 67.232313][ T4275] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 69.040155][ T4488] loop1: detected capacity change from 0 to 262144 [ 69.047222][ T4488] ======================================================= [ 69.047222][ T4488] WARNING: The mand mount option has been deprecated and [ 69.047222][ T4488] and is ignored by this kernel. Remove the mand [ 69.047222][ T4488] option from the mount to silence this warning. [ 69.047222][ T4488] ======================================================= [ 69.106564][ T4472] loop3: detected capacity change from 0 to 32768 [ 69.123933][ T4488] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.19 (4488) [ 69.140739][ T4488] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 69.151083][ T4488] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 69.160290][ T4488] BTRFS info (device loop1): using free space tree [ 69.299771][ T4495] loop2: detected capacity change from 0 to 4096 [ 69.359532][ T4495] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 69.391338][ T4495] ntfs3: loop2: Failed to load $Extend. [ 69.699544][ T4506] loop4: detected capacity change from 0 to 8 [ 70.090862][ T4520] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.099952][ T4520] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.610970][ T4488] BTRFS info (device loop1): enabling ssd optimizations [ 71.392325][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.398844][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.424584][ T4275] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 72.455108][ T4525] loop3: detected capacity change from 0 to 8192 [ 72.502914][ T4506] SQUASHFS error: Failed to initialise xz decompressor [ 72.533382][ T4525] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.545813][ T4506] squashfs image failed sanity check [ 73.476729][ T4549] loop1: detected capacity change from 0 to 512 [ 73.545907][ T4549] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.28: casefold flag without casefold feature [ 73.628072][ T4549] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.28: couldn't read orphan inode 15 (err -117) [ 73.684182][ T4549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.715194][ T4553] loop4: detected capacity change from 0 to 4096 [ 73.851823][ T4553] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.770627][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 75.197075][ T4561] loop1: detected capacity change from 0 to 32768 [ 75.220560][ T4543] loop0: detected capacity change from 0 to 40427 [ 75.976505][ T4543] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 76.234557][ T4561] XFS (loop1): Mounting V5 Filesystem [ 76.268649][ T4543] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.283589][ T951] cfg80211: failed to load regulatory.db [ 76.315749][ T4543] F2FS-fs (loop0): invalid crc value [ 76.336960][ T4561] XFS (loop1): Ending clean mount [ 76.348121][ T4561] XFS (loop1): Quotacheck needed: Please wait. [ 76.387278][ T4543] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 76.413149][ T4553] EXT4-fs (loop4): Test dummy encryption mode enabled [ 76.507105][ T4553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 76.597660][ T4561] XFS (loop1): Quotacheck: Done. [ 77.230392][ T4269] EXT4-fs (loop4): unmounting filesystem. [ 78.848587][ T4275] XFS (loop1): Unmounting Filesystem [ 79.191211][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 79.236455][ T4593] device bridge_slave_1 left promiscuous mode [ 79.285457][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.463371][ T4593] device bridge_slave_0 left promiscuous mode [ 79.482673][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.715818][ T4600] loop1: detected capacity change from 0 to 32768 [ 81.737723][ T4600] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.35 (4600) [ 81.818055][ T4600] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.883916][ T4600] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 81.922278][ T4600] BTRFS info (device loop1): enabling disk space caching [ 82.055701][ T4600] BTRFS info (device loop1): enabling auto defrag [ 82.135495][ T4600] BTRFS info (device loop1): doing ref verification [ 82.176564][ T4600] BTRFS info (device loop1): force zlib compression, level 3 [ 82.240054][ T4609] loop0: detected capacity change from 0 to 32768 [ 82.318018][ T4600] BTRFS info (device loop1): force clearing of disk cache [ 82.341125][ T4600] BTRFS info (device loop1): disabling disk space caching [ 82.467107][ T4609] XFS (loop0): Mounting V5 Filesystem [ 82.559639][ T4609] XFS (loop0): Ending clean mount [ 84.793814][ T4600] BTRFS error (device loop1): open_ctree failed: -12 [ 84.828562][ T4268] XFS (loop0): Unmounting Filesystem [ 87.343972][ T4675] binder: 4671:4675 ioctl c0306201 0 returned -14 [ 87.869993][ T4682] input: syz1 as /devices/virtual/input/input5 [ 87.911050][ T951] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.185337][ T951] usb 3-1: device descriptor read/64, error -71 [ 88.461077][ T951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.508045][ T4692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 88.519572][ T4682] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 88.528480][ T4682] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.51'. [ 88.581674][ T4686] can: request_module (can-proto-0) failed. [ 88.651071][ T951] usb 3-1: device descriptor read/64, error -71 [ 90.572240][ T951] usb usb3-port1: attempt power cycle [ 93.010282][ T4769] loop0: detected capacity change from 0 to 64 [ 94.568043][ T4789] ubi31: attaching mtd0 [ 94.573957][ T4789] ubi31: scanning is finished [ 94.578656][ T4789] ubi31: empty MTD device detected [ 94.725970][ T26] audit: type=1800 audit(1757958844.638:5): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.58" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 94.764165][ T4789] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 94.771857][ T4789] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 94.779161][ T4789] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 94.786292][ T4789] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 94.793820][ T4789] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 94.801232][ T4789] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 94.809778][ T4789] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3085991813 [ 94.819979][ T4789] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 94.880077][ T4795] loop1: detected capacity change from 0 to 2048 [ 94.901605][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 94.948925][ T4795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.037140][ T4794] ubi31: background thread "ubi_bgt31d" started, PID 4794 [ 97.905546][ T4812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 97.919995][ T4812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'. [ 98.286341][ T4815] can: request_module (can-proto-0) failed. [ 98.944082][ T4824] tipc: Enabling of bearer rejected, failed to enable media [ 98.979493][ T4824] device syzkaller0 entered promiscuous mode [ 100.097561][ T4831] loop3: detected capacity change from 0 to 256 [ 100.119227][ T4831] exfat: Deprecated parameter 'utf8' [ 100.205967][ T4831] exfat: Deprecated parameter 'utf8' [ 100.251335][ T4831] exfat: Deprecated parameter 'namecase' [ 100.444214][ T4831] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 101.617776][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 101.668624][ T4837] loop1: detected capacity change from 0 to 32768 [ 101.680369][ T4849] loop0: detected capacity change from 0 to 256 [ 102.740839][ C0] sched: RT throttling activated [ 102.742436][ T4848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 103.147783][ T4849] FAT-fs (loop0): Directory bread(block 64) failed [ 103.154510][ T4849] FAT-fs (loop0): Directory bread(block 65) failed [ 103.161604][ T4849] FAT-fs (loop0): Directory bread(block 66) failed [ 103.168244][ T4849] FAT-fs (loop0): Directory bread(block 67) failed [ 103.175267][ T4849] FAT-fs (loop0): Directory bread(block 68) failed [ 103.181937][ T4849] FAT-fs (loop0): Directory bread(block 69) failed [ 103.188994][ T4849] FAT-fs (loop0): Directory bread(block 70) failed [ 103.196083][ T4849] FAT-fs (loop0): Directory bread(block 71) failed [ 103.203302][ T4849] FAT-fs (loop0): Directory bread(block 72) failed [ 103.209955][ T4849] FAT-fs (loop0): Directory bread(block 73) failed [ 103.744758][ T4837] read_mapping_page failed! [ 103.771154][ T4837] jfs_mount: dbMount failed w/rc = -5 [ 103.808202][ T4845] loop2: detected capacity change from 0 to 8192 [ 103.816544][ T4837] Mount JFS Failure: -5 [ 103.840388][ T4845] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.560421][ T4867] device syzkaller0 entered promiscuous mode [ 105.974786][ T4871] can: request_module (can-proto-0) failed. [ 106.550547][ T4882] loop4: detected capacity change from 0 to 2048 [ 106.588302][ T4882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.630314][ T4869] loop3: detected capacity change from 0 to 32768 [ 106.648474][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 106.675480][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 107.580723][ T4891] loop4: detected capacity change from 0 to 32768 [ 108.567401][ T4909] loop0: detected capacity change from 0 to 8192 [ 108.582943][ T4909] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.661395][ T4906] device syzkaller0 entered promiscuous mode [ 109.076275][ T26] audit: type=1800 audit(1757958858.988:6): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="file1" dev="loop0" ino=1048599 res=0 errno=0 [ 109.588993][ T4927] can: request_module (can-proto-0) failed. [ 110.543698][ T4944] loop3: detected capacity change from 0 to 2048 [ 110.813319][ T4944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.412607][ T4931] loop2: detected capacity change from 0 to 32768 [ 111.472864][ T4945] bridge0: port 3(syz_tun) entered blocking state [ 111.508555][ T4945] bridge0: port 3(syz_tun) entered disabled state [ 111.538817][ T4945] device syz_tun entered promiscuous mode [ 111.560483][ T4945] bridge0: port 3(syz_tun) entered blocking state [ 111.567284][ T4945] bridge0: port 3(syz_tun) entered forwarding state [ 111.625530][ T4931] XFS (loop2): Mounting V5 Filesystem [ 111.776346][ T4931] XFS (loop2): Ending clean mount [ 111.787272][ T4931] XFS (loop2): Quotacheck needed: Please wait. [ 111.844870][ T4931] XFS (loop2): Quotacheck: Done. [ 111.857231][ T26] audit: type=1800 audit(1757958861.768:7): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 112.280534][ T4270] XFS (loop2): Unmounting Filesystem [ 112.679252][ T4973] device syzkaller0 entered promiscuous mode [ 113.024001][ T4976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.113'. [ 113.167428][ T4953] loop1: detected capacity change from 0 to 32768 [ 113.881013][ T4535] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 113.923401][ T4972] loop0: detected capacity change from 0 to 32768 [ 114.133765][ T4535] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 114.157768][ T4535] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 114.540660][ T4535] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 114.552025][ T4535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.560977][ T4535] usb 5-1: Product: syz [ 114.565624][ T4535] usb 5-1: Manufacturer: syz [ 114.570248][ T4535] usb 5-1: SerialNumber: syz [ 114.839292][ T4438] usb 5-1: USB disconnect, device number 2 [ 114.941918][ T4997] loop1: detected capacity change from 0 to 2048 [ 115.537975][ T4997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.827107][ T4996] loop0: detected capacity change from 0 to 8192 [ 115.867194][ T4996] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.230926][ T4332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.249575][ T5004] loop4: detected capacity change from 0 to 4096 [ 116.432743][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.472683][ T4332] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.476465][ T5005] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.506694][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.548967][ T4332] usb 3-1: config 0 descriptor?? [ 116.586801][ T26] audit: type=1800 audit(1757958866.498:8): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.121" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 116.691149][ T26] audit: type=1800 audit(1757958866.548:9): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.121" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 116.985115][ T4332] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 117.061413][ T4332] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 117.377266][ T4332] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 117.973853][ T5007] sctp: [Deprecated]: syz.3.122 (pid 5007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.973853][ T5007] Use struct sctp_sack_info instead [ 118.405608][ T4438] usb 3-1: USB disconnect, device number 5 [ 119.615927][ T5024] ALSA: mixer_oss: invalid OSS volume '' [ 119.683624][ T5035] process 'syz.1.128' launched '/dev/fd/6' with NULL argv: empty string added [ 119.716439][ T5036] input: syz1 as /devices/virtual/input/input7 [ 119.861785][ T5036] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 119.869449][ T5036] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.129'. [ 120.243544][ T5046] loop4: detected capacity change from 0 to 2048 [ 120.541950][ T5046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.027901][ T5051] device syzkaller0 entered promiscuous mode [ 122.478565][ T5059] loop3: detected capacity change from 0 to 262144 [ 122.504262][ T5059] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.137 (5059) [ 122.710244][ T5059] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 122.721918][ T5059] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.731392][ T5059] BTRFS info (device loop3): using free space tree [ 123.412116][ T5059] BTRFS info (device loop3): enabling ssd optimizations [ 126.504502][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.573129][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.138'. [ 126.640178][ T4264] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 126.890402][ T5092] 9pnet_virtio: no channels available for device syz [ 127.605970][ T5097] loop4: detected capacity change from 0 to 2048 [ 128.243069][ T5097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.703322][ T5104] device syzkaller0 entered promiscuous mode [ 128.805974][ T5085] loop1: detected capacity change from 0 to 32768 [ 128.849959][ T5105] loop4: detected capacity change from 0 to 4096 [ 129.096961][ T5105] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.118607][ T5085] XFS (loop1): Mounting V5 Filesystem [ 129.165059][ T5105] ntfs3: loop4: Failed to load $Extend. [ 129.285427][ T5085] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 129.343439][ T5105] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 129.385907][ T5085] XFS (loop1): Starting recovery (logdev: internal) [ 129.419994][ T5099] loop3: detected capacity change from 0 to 32768 [ 129.443909][ T5085] XFS (loop1): Ending recovery (logdev: internal) [ 129.861965][ T5122] can: request_module (can-proto-0) failed. [ 129.969378][ T4275] XFS (loop1): Unmounting Filesystem [ 131.900224][ T5138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 132.595758][ T5138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 132.606813][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.613613][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924301][ T5145] loop2: detected capacity change from 0 to 2048 [ 133.679625][ T5145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.370941][ T4437] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.008807][ T5151] loop1: detected capacity change from 0 to 262144 [ 135.057250][ T5151] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.151 (5151) [ 135.101789][ T5151] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 135.112004][ T5151] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.121342][ T5151] BTRFS info (device loop1): using free space tree [ 135.221346][ T4437] usb 3-1: Using ep0 maxpacket: 16 [ 135.228934][ T4437] usb 3-1: no configurations [ 135.273963][ T4437] usb 3-1: can't read configurations, error -22 [ 135.351037][ T5151] BTRFS info (device loop1): enabling ssd optimizations [ 135.480975][ T4437] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.794588][ T5147] loop0: detected capacity change from 0 to 32768 [ 136.621072][ T4437] usb 3-1: Using ep0 maxpacket: 16 [ 136.627114][ T4437] usb 3-1: no configurations [ 136.638947][ T4437] usb 3-1: can't read configurations, error -22 [ 136.646726][ T4437] usb usb3-port1: attempt power cycle [ 136.924795][ T4275] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 136.959355][ T5147] JFS: metapage_get_blocks failed [ 136.966282][ T5147] ERROR: (device loop0): release_metapage: write_one_page() failed [ 136.966282][ T5147] [ 136.983479][ T5147] ERROR: (device loop0): remounting filesystem as read-only [ 137.432165][ T107] blkno = 8ed2c, nblocks = 1 [ 137.436770][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 137.436770][ T107] [ 139.002147][ T4339] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.761639][ T4339] usb 5-1: Using ep0 maxpacket: 16 [ 139.786798][ T4339] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 139.821115][ T4339] usb 5-1: config 0 has no interface number 0 [ 139.896955][ T5217] loop3: detected capacity change from 0 to 2048 [ 139.938191][ T4339] usb 5-1: New USB device found, idVendor=084d, idProduct=0003, bcdDevice=86.58 [ 139.966819][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.002439][ T4339] usb 5-1: Product: syz [ 140.006726][ T4339] usb 5-1: Manufacturer: syz [ 140.573256][ T5217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.598209][ T4339] usb 5-1: SerialNumber: syz [ 140.622300][ T4339] usb 5-1: config 0 descriptor?? [ 140.639345][ T4339] gspca_main: spca500-2.14.0 probing 084d:0003 [ 140.910095][ T5226] loop1: detected capacity change from 0 to 256 [ 140.961190][ T5226] exfat: Deprecated parameter 'namecase' [ 141.025269][ T5226] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 141.151011][ T4439] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 141.870904][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 141.876634][ T4439] usb 4-1: no configurations [ 141.894883][ T4439] usb 4-1: can't read configurations, error -22 [ 142.091009][ T4439] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.138267][ T4348] usb 5-1: USB disconnect, device number 3 [ 143.650948][ T4439] usb 4-1: Using ep0 maxpacket: 16 [ 143.659400][ T4439] usb 4-1: no configurations [ 143.737483][ T4439] usb 4-1: can't read configurations, error -22 [ 143.921092][ T4439] usb usb4-port1: attempt power cycle [ 144.548879][ T5243] can: request_module (can-proto-0) failed. [ 144.743260][ T5309] loop1: detected capacity change from 0 to 8192 [ 144.805619][ T5309] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.837520][ T5307] loop2: detected capacity change from 0 to 4096 [ 144.866258][ T5307] ntfs3: Unknown parameter '' [ 145.080459][ T5314] capability: warning: `syz.2.179' uses deprecated v2 capabilities in a way that may be insecure [ 147.830999][ T4437] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.581069][ T4437] usb 4-1: Using ep0 maxpacket: 32 [ 148.593028][ T4437] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 148.639470][ T4437] usb 4-1: config 0 has no interface number 0 [ 148.681007][ T4437] usb 4-1: config 0 interface 2 has no altsetting 0 [ 148.700757][ T4437] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 148.739058][ T4437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.787586][ T4437] usb 4-1: Product: syz [ 148.797639][ T4437] usb 4-1: Manufacturer: syz [ 148.806448][ T4437] usb 4-1: SerialNumber: syz [ 148.821156][ T5320] loop2: detected capacity change from 0 to 32768 [ 148.832484][ T4437] usb 4-1: config 0 descriptor?? [ 148.870936][ T4348] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.084751][ T4437] usb 4-1: invalid MIDI in EP 0 [ 149.820924][ T4348] usb 5-1: Using ep0 maxpacket: 16 [ 149.837415][ T4348] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 150.027076][ T4348] usb 5-1: can't read configurations, error -61 [ 150.320995][ T4348] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.439654][ T4437] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 150.590071][ T4437] usb 4-1: USB disconnect, device number 5 [ 150.650947][ T4348] usb 5-1: Using ep0 maxpacket: 16 [ 150.658677][ T4348] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 150.780065][ T4348] usb 5-1: can't read configurations, error -61 [ 150.928717][ T4348] usb usb5-port1: attempt power cycle [ 150.994130][ T5398] udevd[5398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.206394][ T4348] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.772746][ T5405] loop1: detected capacity change from 0 to 256 [ 154.080763][ T4348] usb 5-1: device descriptor read/8, error -71 [ 154.490103][ T5405] FAT-fs (loop1): Directory bread(block 64) failed [ 154.496739][ T5405] FAT-fs (loop1): Directory bread(block 65) failed [ 154.503657][ T5405] FAT-fs (loop1): Directory bread(block 66) failed [ 154.510161][ T5405] FAT-fs (loop1): Directory bread(block 67) failed [ 154.516741][ T5405] FAT-fs (loop1): Directory bread(block 68) failed [ 154.523333][ T5405] FAT-fs (loop1): Directory bread(block 69) failed [ 154.529871][ T5405] FAT-fs (loop1): Directory bread(block 70) failed [ 154.536436][ T5405] FAT-fs (loop1): Directory bread(block 71) failed [ 154.543029][ T5405] FAT-fs (loop1): Directory bread(block 72) failed [ 154.549522][ T5405] FAT-fs (loop1): Directory bread(block 73) failed [ 156.481339][ T5427] loop1: detected capacity change from 0 to 2048 [ 157.866912][ T5427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.055372][ T5424] can: request_module (can-proto-0) failed. [ 158.720183][ T5440] loop4: detected capacity change from 0 to 8192 [ 159.493078][ T5430] loop0: detected capacity change from 0 to 32768 [ 159.511758][ T5440] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.927162][ T5453] loop2: detected capacity change from 0 to 32768 [ 159.950113][ T5451] loop3: detected capacity change from 0 to 2048 [ 160.004667][ T5451] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 160.043386][ T5451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.095107][ T5453] XFS (loop2): Mounting V5 Filesystem [ 161.273814][ T5467] loop1: detected capacity change from 0 to 262144 [ 161.297093][ T5467] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.209 (5467) [ 161.311036][ T5467] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 161.321229][ T5467] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.330425][ T5467] BTRFS info (device loop1): using free space tree [ 161.375367][ T5453] XFS (loop2): Ending clean mount [ 161.384459][ T5453] XFS (loop2): Quotacheck needed: Please wait. [ 161.708742][ T5453] XFS (loop2): Quotacheck: Done. [ 161.751573][ T5467] BTRFS info (device loop1): enabling ssd optimizations [ 164.222682][ T4275] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 164.321059][ T4437] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.460471][ T4284] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 11 /dev/loop1 scanned by udevd (4284) [ 164.522764][ T4437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.535482][ T4437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.663383][ T4270] XFS (loop2): Unmounting Filesystem [ 164.684318][ T4437] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 164.710894][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.213340][ T5516] device syzkaller0 entered promiscuous mode [ 165.301622][ T4437] usb 1-1: config 0 descriptor?? [ 165.554585][ T5506] loop3: detected capacity change from 0 to 32768 [ 165.708788][ T5506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.214 (5506) [ 165.729838][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.871676][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.889749][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.944254][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.968765][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.996342][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 166.260748][ T5522] can: request_module (can-proto-0) failed. [ 166.268988][ T4437] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 166.301668][ T4437] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 166.386109][ T5506] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.428171][ T5506] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 166.465292][ T4437] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 166.493954][ T5506] BTRFS info (device loop3): using free space tree [ 166.718756][ T4437] cp2112 0003:10C4:EA90.0002: error setting SMBus config [ 166.749343][ T4437] cp2112: probe of 0003:10C4:EA90.0002 failed with error -71 [ 166.759676][ T4437] usb 1-1: USB disconnect, device number 2 [ 166.798524][ T5506] BTRFS info (device loop3): enabling ssd optimizations [ 167.021193][ T5558] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same [ 167.350735][ T5528] loop1: detected capacity change from 0 to 32768 [ 168.069367][ T4264] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.088320][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 168.190433][ T5556] fido_id[5556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 168.211336][ T5564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 169.060086][ T5572] loop4: detected capacity change from 0 to 8192 [ 169.167538][ T5572] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.611626][ T5568] loop2: detected capacity change from 0 to 262144 [ 169.632938][ T4265] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 169.655745][ T5568] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 170.878852][ T5586] loop3: detected capacity change from 0 to 2048 [ 170.930976][ T4265] usb 2-1: Using ep0 maxpacket: 16 [ 170.938114][ T4265] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 170.974603][ T4265] usb 2-1: can't read configurations, error -61 [ 171.047168][ T5586] loop3: p1 < > p4 [ 171.081743][ T5586] loop3: p4 size 8388608 extends beyond EOD, truncated [ 171.151036][ T4265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.197328][ T5577] block nbd0: shutting down sockets [ 171.351187][ T4265] usb 2-1: Using ep0 maxpacket: 16 [ 171.358639][ T4265] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 171.379793][ T4258] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 171.407556][ T4265] usb 2-1: can't read configurations, error -61 [ 171.435017][ T4265] usb usb2-port1: attempt power cycle [ 171.614298][ T5588] can: request_module (can-proto-0) failed. [ 171.860962][ T4265] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.901656][ T4265] usb 2-1: Using ep0 maxpacket: 16 [ 171.909474][ T4265] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 171.945237][ T4265] usb 2-1: can't read configurations, error -61 [ 173.255893][ T5599] futex_wake_op: syz.2.231 tries to shift op by -1; fix this program [ 173.279281][ T5599] Zero length message leads to an empty skb [ 173.414880][ T5605] loop1: detected capacity change from 0 to 64 [ 176.724715][ T5632] can: request_module (can-proto-0) failed. [ 176.781073][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 177.051045][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 177.064845][ T125] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.314419][ T125] usb 1-1: can't read configurations, error -61 [ 177.612416][ T125] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 177.783513][ T5691] device syzkaller0 entered promiscuous mode [ 177.810916][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 177.817963][ T125] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 177.866488][ T125] usb 1-1: can't read configurations, error -61 [ 177.886866][ T125] usb usb1-port1: attempt power cycle [ 178.190810][ T5695] program syz.1.245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.200674][ T5695] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 178.330900][ T125] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.014398][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 179.032451][ T125] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 179.050895][ T125] usb 1-1: can't read configurations, error -61 [ 180.701121][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.761115][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 180.767171][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 180.773324][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 180.779352][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 180.785406][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 180.970933][ T125] usb 1-1: device not accepting address 6, error -71 [ 180.984903][ T125] usb usb1-port1: unable to enumerate USB device [ 181.068465][ T5747] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 181.140395][ T5704] loop1: detected capacity change from 0 to 8192 [ 181.375603][ T5704] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.922071][ T5768] device syzkaller0 entered promiscuous mode [ 183.533500][ T5777] can: request_module (can-proto-0) failed. [ 186.390002][ T5782] loop1: detected capacity change from 0 to 32768 [ 187.616265][ T5812] loop2: detected capacity change from 0 to 8192 [ 187.663427][ T5812] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.209831][ T5816] loop0: detected capacity change from 0 to 32768 [ 188.463414][ T5825] netlink: 'syz.4.271': attribute type 4 has an invalid length. [ 188.479753][ T5825] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.271'. [ 191.108308][ T5887] can: request_module (can-proto-0) failed. [ 192.907628][ T5908] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 193.008263][ T5910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.280'. [ 193.224911][ T5906] loop0: detected capacity change from 0 to 32768 [ 193.885805][ T5918] loop4: detected capacity change from 0 to 1024 [ 193.939558][ T5918] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 194.048876][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.979240][ T5925] loop4: detected capacity change from 0 to 8192 [ 195.006325][ T5925] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.140700][ T5927] loop1: detected capacity change from 0 to 4096 [ 195.242585][ T5930] loop4: detected capacity change from 8192 to 0 [ 195.268879][ T11] loop: Write error at byte offset 9223372036854776319, length 512. [ 195.272184][ C1] I/O error, dev loop4, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.315282][ C0] I/O error, dev loop4, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 195.324836][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 195.402712][ C0] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.412885][ T5925] FAT-fs (loop4): FAT read failed (blocknr 1) [ 195.449137][ C0] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.458482][ T5925] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 195.477928][ T4424] loop: Write error at byte offset 9223372036854819327, length 512. [ 195.599189][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 195.607411][ C0] I/O error, dev loop4, sector 85 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 195.616967][ C0] Buffer I/O error on dev loop4, logical block 85, lost async page write [ 195.625543][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 195.633873][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 195.666328][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 196.298205][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 196.370234][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 196.380074][ T4424] loop: Write error at byte offset 9223372036854825471, length 512. [ 196.409048][ T4424] loop: Write error at byte offset 9223372036854825471, length 4096. [ 196.449603][ C1] I/O error, dev loop4, sector 97 op 0x1:(WRITE) flags 0x800 phys_seg 9 prio class 2 [ 196.459206][ C1] Buffer I/O error on dev loop4, logical block 97, lost async page write [ 196.467673][ C1] Buffer I/O error on dev loop4, logical block 98, lost async page write [ 196.476112][ C1] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 196.484555][ C1] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 196.493092][ C1] Buffer I/O error on dev loop4, logical block 101, lost async page write [ 196.501602][ C1] Buffer I/O error on dev loop4, logical block 102, lost async page write [ 196.510086][ C1] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 196.853900][ T5946] device syzkaller0 entered promiscuous mode [ 196.893032][ T5948] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.902347][ T5948] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.911150][ T5948] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.919868][ T5948] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.937742][ T5948] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.946725][ T5948] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.955708][ T5948] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.964612][ T5948] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.156926][ T5952] loop0: detected capacity change from 0 to 512 [ 197.231993][ T5952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.251180][ T5952] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.399310][ T5940] loop2: detected capacity change from 0 to 32768 [ 197.933806][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 198.095803][ T5957] can: request_module (can-proto-0) failed. [ 199.799459][ C1] I/O error, dev loop4, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.811038][ T4422] FAT-fs (loop4): unable to read inode block for updating (i_pos 1050) [ 200.667449][ T6002] loop1: detected capacity change from 0 to 128 [ 202.531627][ T4434] kworker/u4:19: attempt to access beyond end of device [ 202.531627][ T4434] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 203.885438][ T6011] loop3: detected capacity change from 0 to 8192 [ 203.942651][ T6011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.168382][ T6027] loop2: detected capacity change from 0 to 1024 [ 206.142767][ T6027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.171064][ T6027] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.477934][ T6043] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 206.486861][ T6043] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 207.628938][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 207.861048][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 207.922301][ T6056] netlink: 104 bytes leftover after parsing attributes in process `syz.4.321'. [ 208.011104][ T4539] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.225622][ T4539] usb 4-1: Using ep0 maxpacket: 16 [ 208.233294][ T4539] usb 4-1: config 0 has no interfaces? [ 208.263711][ T4539] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.314673][ T4539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.330974][ T4539] usb 4-1: Product: syz [ 208.350432][ T4539] usb 4-1: Manufacturer: syz [ 208.355146][ T4539] usb 4-1: SerialNumber: syz [ 208.405730][ T4539] usb 4-1: config 0 descriptor?? [ 208.674028][ T4539] usb 4-1: USB disconnect, device number 6 [ 208.717129][ T6059] can: request_module (can-proto-0) failed. [ 210.909033][ T6085] loop2: detected capacity change from 0 to 8192 [ 210.965055][ T6085] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.180919][ T4539] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 211.380953][ T4539] usb 1-1: Using ep0 maxpacket: 32 [ 211.389824][ T4539] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 211.429481][ T4539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.459898][ T4539] usb 1-1: Product: syz [ 211.464453][ T4539] usb 1-1: Manufacturer: syz [ 211.469072][ T4539] usb 1-1: SerialNumber: syz [ 211.508887][ T4539] usb 1-1: config 0 descriptor?? [ 211.563258][ T4539] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 211.565056][ T6089] loop3: detected capacity change from 0 to 32768 [ 212.522793][ T6112] hub 9-0:1.0: USB hub found [ 212.531191][ T6112] hub 9-0:1.0: 1 port detected [ 212.655638][ T4539] gspca_ov534_9: reg_w failed -71 [ 213.216899][ T6118] tipc: Started in network mode [ 213.241017][ T6118] tipc: Node identity c6c21e88691a, cluster identity 4711 [ 213.261554][ T6118] tipc: Enabled bearer , priority 0 [ 213.280937][ T4539] gspca_ov534_9: Unknown sensor 0000 [ 213.281006][ T4539] ov534_9: probe of 1-1:0.0 failed with error -22 [ 213.311285][ T6118] tipc: Resetting bearer [ 213.334229][ T4539] usb 1-1: USB disconnect, device number 7 [ 213.395553][ T6117] tipc: Disabling bearer [ 213.615681][ T4377] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.260923][ T4377] usb 4-1: Using ep0 maxpacket: 16 [ 214.267467][ T4377] usb 4-1: config 0 has no interfaces? [ 214.315910][ T4377] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.347683][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.369828][ T4377] usb 4-1: Product: syz [ 214.379541][ T4377] usb 4-1: Manufacturer: syz [ 214.393064][ T4377] usb 4-1: SerialNumber: syz [ 214.434148][ T4377] usb 4-1: config 0 descriptor?? [ 214.652233][ T4377] usb 4-1: USB disconnect, device number 7 [ 214.701899][ T6125] loop0: detected capacity change from 0 to 32768 [ 214.854302][ T6125] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 214.927199][ T6136] can: request_module (can-proto-0) failed. [ 214.946107][ T6125] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 215.625361][ T6145] loop1: detected capacity change from 0 to 32768 [ 217.059010][ T6159] IPVS: length: 104 != 8 [ 217.406900][ T6164] syz.1.353 uses obsolete (PF_INET,SOCK_PACKET) [ 219.262218][ T6172] tipc: Enabling of bearer rejected, failed to enable media [ 219.323053][ T6172] device syzkaller0 entered promiscuous mode [ 219.579524][ T4269] cgroup: fork rejected by pids controller in /syz4 [ 219.760912][ T5190] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.930503][ T6182] loop2: detected capacity change from 0 to 4096 [ 219.940585][ T4268] ocfs2: Unmounting device (7,0) on (node local) [ 219.943765][ T4269] bridge0: port 3(syz_tun) entered disabled state [ 219.979578][ T6182] ntfs3: Unknown parameter '' [ 220.038300][ T4269] device syz_tun left promiscuous mode [ 220.059164][ T4269] bridge0: port 3(syz_tun) entered disabled state [ 220.137232][ T5190] usb 2-1: Using ep0 maxpacket: 16 [ 220.156203][ T5190] usb 2-1: config 0 has no interfaces? [ 220.173008][ T5190] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.191111][ T5190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.199149][ T5190] usb 2-1: Product: syz [ 220.233132][ T5190] usb 2-1: Manufacturer: syz [ 220.237857][ T5190] usb 2-1: SerialNumber: syz [ 220.323625][ T5190] usb 2-1: config 0 descriptor?? [ 220.694296][ T125] usb 2-1: USB disconnect, device number 6 [ 221.008932][ T4434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.162909][ T4434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.355426][ T4434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.441614][ T6206] loop1: detected capacity change from 0 to 256 [ 221.497784][ T6206] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x44396dfa, utbl_chksum : 0xe619d30d) [ 221.535087][ T4434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.207028][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.218762][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.235392][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.244399][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.253200][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.260492][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.320338][ T6204] loop3: detected capacity change from 0 to 32768 [ 222.479293][ T6204] XFS (loop3): Mounting V5 Filesystem [ 222.598764][ T6204] XFS (loop3): Ending clean mount [ 222.656768][ T6204] XFS (loop3): Quotacheck needed: Please wait. [ 222.778288][ T6204] XFS (loop3): Quotacheck: Done. [ 222.933703][ T4264] XFS (loop3): Unmounting Filesystem [ 223.224289][ T6224] can: request_module (can-proto-0) failed. [ 223.406204][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 223.531992][ T4272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.543250][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.561284][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.582483][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.592238][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.599519][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.281071][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 224.721376][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 224.897477][ T6253] device hsr_slave_1 left promiscuous mode [ 224.907117][ T6254] device syzkaller0 entered promiscuous mode [ 224.947529][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.956216][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.985554][ T6209] device bridge_slave_0 entered promiscuous mode [ 225.058184][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.092063][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.306963][ T6209] device bridge_slave_1 entered promiscuous mode [ 225.670027][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 225.899183][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.360928][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 227.619118][ T4434] device hsr_slave_0 left promiscuous mode [ 227.627656][ T4434] device hsr_slave_1 left promiscuous mode [ 227.665887][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.695685][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.714239][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.720998][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 227.732793][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.743949][ T4434] device bridge_slave_1 left promiscuous mode [ 227.763132][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.836887][ T4434] device bridge_slave_0 left promiscuous mode [ 227.861286][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.932436][ T4434] device veth1_macvtap left promiscuous mode [ 227.949282][ T4434] device veth0_macvtap left promiscuous mode [ 227.966061][ T4434] device veth1_vlan left promiscuous mode [ 227.979058][ T4434] device veth0_vlan left promiscuous mode [ 228.024757][ T6286] can: request_module (can-proto-0) failed. [ 228.039528][ T6277] loop3: detected capacity change from 0 to 40427 [ 228.104504][ T6277] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 228.451000][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 228.885305][ T6294] loop0: detected capacity change from 0 to 8192 [ 228.941824][ T6294] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.801033][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 230.052178][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 230.283939][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 230.512657][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.521510][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 230.652250][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.110228][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 231.122552][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 231.130155][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.140241][ T4281] Workqueue: hci2 hci_rx_work [ 231.144967][ T4281] Call Trace: [ 231.148243][ T4281] [ 231.151170][ T4281] dump_stack_lvl+0x168/0x22e [ 231.155854][ T4281] ? show_regs_print_info+0x12/0x12 [ 231.161050][ T4281] ? load_image+0x3b0/0x3b0 [ 231.165576][ T4281] sysfs_create_dir_ns+0x252/0x280 [ 231.170687][ T4281] ? hci_rx_work+0x3eb/0xd40 [ 231.175281][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 231.179957][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 231.185159][ T4281] kobject_add_internal+0x6b8/0xc80 [ 231.190365][ T4281] kobject_add+0x152/0x210 [ 231.194783][ T4281] ? kobject_init+0x1d0/0x1d0 [ 231.199461][ T4281] ? klist_children_get+0x50/0x50 [ 231.204507][ T4281] ? get_device_parent+0x121/0x3f0 [ 231.209639][ T4281] device_add+0x483/0xfb0 [ 231.213976][ T4281] ? kmem_cache_free+0xf7/0x290 [ 231.218831][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 231.223778][ T4281] le_conn_complete_evt+0xd1d/0x1320 [ 231.229067][ T4281] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 231.235308][ T4281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 231.240949][ T4281] ? skb_pull_data+0xf7/0x200 [ 231.245627][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 231.251177][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 231.257243][ T4281] hci_event_packet+0x791/0x1210 [ 231.262185][ T4281] ? bis_list+0x280/0x280 [ 231.266508][ T4281] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 231.272426][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 231.277545][ T4281] ? __show_mem+0xe0/0x308 [ 231.281967][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 231.287166][ T4281] hci_rx_work+0x3eb/0xd40 [ 231.291588][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 231.296447][ T4281] ? process_one_work+0x7a1/0x1160 [ 231.301553][ T4281] process_one_work+0x898/0x1160 [ 231.306498][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 231.312138][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 231.317162][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 231.322532][ T4281] ? kthread_data+0x4b/0xc0 [ 231.327044][ T4281] worker_thread+0xaa2/0x1250 [ 231.331779][ T4281] kthread+0x29d/0x330 [ 231.335860][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 231.340883][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 231.345475][ T4281] ret_from_fork+0x1f/0x30 [ 231.349898][ T4281] [ 231.357162][ T4281] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.372388][ T4281] Bluetooth: hci2: failed to register connection device [ 231.571809][ T4434] bond0 (unregistering): Released all slaves [ 231.654157][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.682384][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 231.708648][ T6321] tipc: Enabling of bearer rejected, failed to enable media [ 231.747192][ T6209] team0: Port device team_slave_0 added [ 231.789551][ T6209] team0: Port device team_slave_1 added [ 231.837669][ T6320] device syzkaller0 entered promiscuous mode [ 231.880968][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 232.034799][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.043585][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.048644][ T6332] loop3: detected capacity change from 0 to 512 [ 232.143968][ T6332] EXT4-fs warning (device loop3): ext4_xattr_inode_get:495: inode #11: comm syz.3.389: ea_inode file size=0 entry size=6 [ 232.192781][ T6332] ------------[ cut here ]------------ [ 232.198502][ T6332] EA inode 11 i_nlink=2 [ 232.232680][ T6332] WARNING: CPU: 0 PID: 6332 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x517/0x570 [ 232.247168][ T6332] Modules linked in: [ 232.251204][ T6332] CPU: 0 PID: 6332 Comm: syz.3.389 Not tainted syzkaller #0 [ 232.258496][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.268598][ T6332] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 232.275227][ T6332] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 bb fa 9c ff 49 8b 37 48 c7 c7 60 9d a0 8a 44 89 f2 e8 d9 03 19 ff <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 232.294866][ T6332] RSP: 0018:ffffc90004467340 EFLAGS: 00010246 [ 232.301040][ T6332] RAX: 2ea180c12c78d500 RBX: ffff8880551b16c0 RCX: 0000000000080000 [ 232.309038][ T6332] RDX: ffffc9000ee7a000 RSI: 0000000000011043 RDI: 0000000000011044 [ 232.317161][ T6332] RBP: ffffc90004467430 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 232.325487][ T6332] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: dffffc0000000000 [ 232.333626][ T6332] R13: ffffc900044673a0 R14: 0000000000000002 R15: ffff8880551b1700 [ 232.341637][ T6332] FS: 00007f6f5ec886c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 232.350563][ T6332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.357196][ T6332] CR2: 00007f0d55fcf930 CR3: 0000000028c68000 CR4: 00000000003506f0 [ 232.365204][ T6332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.373195][ T6332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.381188][ T6332] Call Trace: [ 232.384458][ T6332] [ 232.387384][ T6332] ? ext4_xattr_block_csum+0x500/0x500 [ 232.392867][ T6332] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 232.398936][ T6332] ext4_xattr_inode_dec_ref_all+0xa91/0xfe0 [ 232.404853][ T6332] ? errseq_check+0x3c/0x70 [ 232.409346][ T6332] ? ext4_xattr_delete_inode+0xbb0/0xbb0 [ 232.414998][ T6332] ? __ext4_journal_ensure_credits+0x450/0x450 [ 232.421168][ T6332] ext4_xattr_delete_inode+0x9f1/0xbb0 [ 232.426630][ T6332] ? ext4_truncate+0xccd/0x1230 [ 232.431502][ T6332] ? up_write+0x1bb/0x420 [ 232.435818][ T6332] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 232.441904][ T6332] ext4_evict_inode+0xc39/0x1100 [ 232.446836][ T6332] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 232.452744][ T6332] ? evict+0x47f/0x870 [ 232.456805][ T6332] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 232.462713][ T6332] evict+0x485/0x870 [ 232.466600][ T6332] ? __lock_acquire+0x7c50/0x7c50 [ 232.471642][ T6332] ? proc_nr_inodes+0x2f0/0x2f0 [ 232.476483][ T6332] ? do_raw_spin_unlock+0x11d/0x230 [ 232.481701][ T6332] ? _raw_spin_unlock+0x24/0x40 [ 232.486541][ T6332] ? iput+0x768/0x980 [ 232.490510][ T6332] ext4_orphan_cleanup+0xbd3/0x1400 [ 232.495729][ T6332] ? ext4_orphan_del+0xb90/0xb90 [ 232.500653][ T6332] ? errseq_check_and_advance+0x62/0x120 [ 232.506295][ T6332] ext4_fill_super+0x7bc2/0x8150 [ 232.511254][ T6332] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 232.517478][ T6332] ? snprintf+0xd7/0x120 [ 232.521728][ T6332] ? preempt_count_add+0x8d/0x190 [ 232.526742][ T6332] ? set_blocksize+0x1d3/0x350 [ 232.531525][ T6332] ? sb_set_blocksize+0xa5/0xe0 [ 232.536362][ T6332] get_tree_bdev+0x3f1/0x610 [ 232.540965][ T6332] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 232.547191][ T6332] vfs_get_tree+0x88/0x270 [ 232.551683][ T6332] do_new_mount+0x24a/0xa40 [ 232.556175][ T6332] __se_sys_mount+0x2d6/0x3c0 [ 232.560882][ T6332] ? __x64_sys_mount+0xc0/0xc0 [ 232.565637][ T6332] ? lockdep_hardirqs_on+0x94/0x140 [ 232.570886][ T6332] ? __x64_sys_mount+0x1c/0xc0 [ 232.575635][ T6332] do_syscall_64+0x4c/0xa0 [ 232.580055][ T6332] ? clear_bhb_loop+0x60/0xb0 [ 232.584739][ T6332] ? clear_bhb_loop+0x60/0xb0 [ 232.589398][ T6332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.595302][ T6332] RIP: 0033:0x7f6f5dd9034a [ 232.599716][ T6332] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.619331][ T6332] RSP: 002b:00007f6f5ec87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.627762][ T6332] RAX: ffffffffffffffda RBX: 00007f6f5ec87ef0 RCX: 00007f6f5dd9034a [ 232.635748][ T6332] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6f5ec87eb0 [ 232.643724][ T6332] RBP: 0000200000000180 R08: 00007f6f5ec87ef0 R09: 0000000000800700 [ 232.651704][ T6332] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 232.659661][ T6332] R13: 00007f6f5ec87eb0 R14: 0000000000000473 R15: 0000200000000680 [ 232.667655][ T6332] [ 232.670675][ T6332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 232.677930][ T6332] CPU: 0 PID: 6332 Comm: syz.3.389 Not tainted syzkaller #0 [ 232.685191][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.695225][ T6332] Call Trace: [ 232.698486][ T6332] [ 232.701399][ T6332] dump_stack_lvl+0x168/0x22e [ 232.706059][ T6332] ? memcpy+0x3c/0x60 [ 232.710025][ T6332] ? show_regs_print_info+0x12/0x12 [ 232.715207][ T6332] ? load_image+0x3b0/0x3b0 [ 232.719701][ T6332] panic+0x2c9/0x710 [ 232.723585][ T6332] ? bpf_jit_dump+0xd0/0xd0 [ 232.728087][ T6332] __warn+0x2f8/0x4f0 [ 232.732053][ T6332] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 232.738017][ T6332] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 232.743980][ T6332] report_bug+0x2ba/0x4f0 [ 232.748316][ T6332] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 232.754282][ T6332] handle_bug+0x3a/0x70 [ 232.758423][ T6332] exc_invalid_op+0x16/0x40 [ 232.762913][ T6332] asm_exc_invalid_op+0x16/0x20 [ 232.767742][ T6332] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 232.774312][ T6332] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 bb fa 9c ff 49 8b 37 48 c7 c7 60 9d a0 8a 44 89 f2 e8 d9 03 19 ff <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 232.793898][ T6332] RSP: 0018:ffffc90004467340 EFLAGS: 00010246 [ 232.799962][ T6332] RAX: 2ea180c12c78d500 RBX: ffff8880551b16c0 RCX: 0000000000080000 [ 232.807922][ T6332] RDX: ffffc9000ee7a000 RSI: 0000000000011043 RDI: 0000000000011044 [ 232.815873][ T6332] RBP: ffffc90004467430 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 232.823826][ T6332] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: dffffc0000000000 [ 232.831781][ T6332] R13: ffffc900044673a0 R14: 0000000000000002 R15: ffff8880551b1700 [ 232.839750][ T6332] ? ext4_xattr_block_csum+0x500/0x500 [ 232.845216][ T6332] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 232.851273][ T6332] ext4_xattr_inode_dec_ref_all+0xa91/0xfe0 [ 232.857156][ T6332] ? errseq_check+0x3c/0x70 [ 232.861646][ T6332] ? ext4_xattr_delete_inode+0xbb0/0xbb0 [ 232.867264][ T6332] ? __ext4_journal_ensure_credits+0x450/0x450 [ 232.873408][ T6332] ext4_xattr_delete_inode+0x9f1/0xbb0 [ 232.878851][ T6332] ? ext4_truncate+0xccd/0x1230 [ 232.883707][ T6332] ? up_write+0x1bb/0x420 [ 232.888018][ T6332] ? ext4_expand_extra_isize_ea+0x19b0/0x19b0 [ 232.894072][ T6332] ext4_evict_inode+0xc39/0x1100 [ 232.899000][ T6332] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 232.904897][ T6332] ? evict+0x47f/0x870 [ 232.908950][ T6332] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 232.914827][ T6332] evict+0x485/0x870 [ 232.918702][ T6332] ? __lock_acquire+0x7c50/0x7c50 [ 232.923716][ T6332] ? proc_nr_inodes+0x2f0/0x2f0 [ 232.928550][ T6332] ? do_raw_spin_unlock+0x11d/0x230 [ 232.933737][ T6332] ? _raw_spin_unlock+0x24/0x40 [ 232.938604][ T6332] ? iput+0x768/0x980 [ 232.942578][ T6332] ext4_orphan_cleanup+0xbd3/0x1400 [ 232.947770][ T6332] ? ext4_orphan_del+0xb90/0xb90 [ 232.952694][ T6332] ? errseq_check_and_advance+0x62/0x120 [ 232.958310][ T6332] ext4_fill_super+0x7bc2/0x8150 [ 232.963241][ T6332] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 232.969466][ T6332] ? snprintf+0xd7/0x120 [ 232.973695][ T6332] ? preempt_count_add+0x8d/0x190 [ 232.978707][ T6332] ? set_blocksize+0x1d3/0x350 [ 232.983452][ T6332] ? sb_set_blocksize+0xa5/0xe0 [ 232.988287][ T6332] get_tree_bdev+0x3f1/0x610 [ 232.992859][ T6332] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 232.999078][ T6332] vfs_get_tree+0x88/0x270 [ 233.003476][ T6332] do_new_mount+0x24a/0xa40 [ 233.007965][ T6332] __se_sys_mount+0x2d6/0x3c0 [ 233.012632][ T6332] ? __x64_sys_mount+0xc0/0xc0 [ 233.017378][ T6332] ? lockdep_hardirqs_on+0x94/0x140 [ 233.022558][ T6332] ? __x64_sys_mount+0x1c/0xc0 [ 233.027303][ T6332] do_syscall_64+0x4c/0xa0 [ 233.031699][ T6332] ? clear_bhb_loop+0x60/0xb0 [ 233.036356][ T6332] ? clear_bhb_loop+0x60/0xb0 [ 233.041024][ T6332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.046904][ T6332] RIP: 0033:0x7f6f5dd9034a [ 233.051302][ T6332] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.070917][ T6332] RSP: 002b:00007f6f5ec87e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 233.079328][ T6332] RAX: ffffffffffffffda RBX: 00007f6f5ec87ef0 RCX: 00007f6f5dd9034a [ 233.087281][ T6332] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f6f5ec87eb0 [ 233.095232][ T6332] RBP: 0000200000000180 R08: 00007f6f5ec87ef0 R09: 0000000000800700 [ 233.103187][ T6332] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 233.111157][ T6332] R13: 00007f6f5ec87eb0 R14: 0000000000000473 R15: 0000200000000680 [ 233.119121][ T6332] [ 233.122372][ T6332] Kernel Offset: disabled [ 233.126747][ T6332] Rebooting in 86400 seconds..